1. Data Controller

For personal data processed within the scope of EventPark services, the data controller under applicable data protection legislation is the EventPark operator whose details are provided below:

• Company Name: EventPark Trading LTD
• Address: Mete Adanır Caddesi, Yukarı Girne Değirmen Taşı Mahallesi, Özgür Sokak, Sonya 1 APT, Girne 9320
• Website: eventpark.com
• Email: info@eventpark.com

2. Personal Data We Collect

You are not required to create a user account or user profile to purchase tickets on EventPark.

Depending on how you use EventPark and the transactions you carry out, personal data in the following categories may be collected.

3. How Do We Use Personal Data?

The personal data collected may be processed for the following purposes:

• Carrying out ticket purchases;
• Processing and verifying payments;
• Creating and verifying orders;
• Generating electronic tickets and QR codes;
• Delivering purchased tickets through the contact channel specified by the user;
• Validating tickets at event entry;
• Informing ticket holders of important matters such as event cancellations, postponements or changes of date or venue;
• Managing cancellation and refund requests;
• Responding to user requests and support enquiries;
• Investigating incorrect or duplicate payments;
• Preventing fraud and unauthorised transactions;
• Ensuring platform and payment security;
• Identifying and resolving technical problems;
• Improving EventPark services and the website;
• Fulfilling legal and regulatory obligations;
• Conducting accounting and financial operations;
• Sending promotional, event-related and marketing communications where the necessary permissions have been given.

EventPark does not use personal data obtained during ticket purchases to create a user profile or membership account.

Personal data is processed only in connection with the purposes for which it was collected and to the extent necessary.

4. Legal Bases for Processing Personal Data

EventPark processes personal data in accordance with the legal bases set out in applicable data protection legislation.

Depending on the circumstances, data may be processed on legal bases such as entering into or performing a contract, fulfilling EventPark’s legal obligations, protecting the legitimate interests of EventPark or third parties, or obtaining the user’s explicit consent.

For example, when you purchase a ticket, processing the personal data needed to create the order, process the payment, prepare the electronic ticket and deliver it to you may be necessary to carry out the purchase.

For activities requiring explicit consent, such as marketing or non-essential cookies, the necessary permissions are obtained in accordance with the relevant legislation.

5. Sharing Data with Event Organisers

Certain personal data may need to be shared with the relevant event organiser so that the event you have purchased a ticket for can take place and your ticket can be validated.

Depending on the event, the information shared may include your first name, surname, ticket information, ticket category, reservation or order number and other information necessary for admission to the event.

The intention is to share with organisers only the data necessary to run the relevant event and handle ticket-related operations.

If the organiser separately processes personal data for its own purposes, it may be responsible for its own data protection obligations under applicable legislation.

6. Payment Service Providers

Payments made through EventPark may be carried out through third-party payment service providers, banks or financial institutions.

Information necessary to complete the payment transaction may be shared with these organisations or collected directly by them.

These service providers’ processing of personal data may be subject to their own privacy policies and applicable legislation.

7. Sharing Data with Other Service Providers

To provide EventPark services, personal data may be shared, to the extent necessary, with:

• Hosting and cloud infrastructure providers;
• Payment service providers;
• Email and notification services;
• Customer support systems;
• Analytics and performance services;
• Cybersecurity service providers;
• Accounting and financial service providers;
• Technical infrastructure providers.

The intention is to share with these parties only the data necessary to provide the relevant service and to protect the data through appropriate security measures.

8. Sharing Data for Legal Reasons

EventPark may share personal data with relevant public bodies, regulatory organisations, courts or other competent authorities where necessary to fulfil a legal obligation or respond to lawful requests from competent authorities.

Data may also be shared to the extent necessary to protect the rights and safety of EventPark, users or third parties, or to investigate fraud and unlawful activities.

9. International Data Transfers

Because some technical infrastructure, cloud, analytics, communications or other service providers used by EventPark operate in different countries, personal data may be processed or stored outside the country in which the user is located.

Where such a transfer takes place, EventPark endeavours to adopt the appropriate legal and technical measures required by applicable data protection legislation.

10. Retention of Personal Data

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected or for the statutory retention periods required by applicable legislation.

The absence of a user account does not mean that all data obtained during a ticket purchase will be deleted immediately after the transaction is completed.

Certain data relating to orders, payments and ticket transactions may need to be retained for specified periods for accounting, tax, financial records, fraud prevention, refunds, management of legal disputes or fulfilment of other legal obligations.

When determining retention periods, consideration may be given to the nature of the data, the purpose of processing, contractual obligations, accounting and tax requirements, potential legal disputes and legal obligations.

Personal data that no longer needs to be retained is deleted, anonymised or made inaccessible in accordance with applicable legislation.

11. Data Security

EventPark aims to implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.

Depending on the nature of the service and the data processed, these measures may include access controls, authorisation mechanisms, secure communication methods, payment security and system security.

However, the absolute security of any data transmission over the internet or method of electronic storage cannot be guaranteed.

12. Security of Electronic Tickets and QR Codes

Following a purchase through EventPark, the user may receive an electronic ticket, QR code, reservation number or similar admission document.

It is the user’s responsibility not to share the ticket or QR code with third parties.

Information associated with QR codes and electronic tickets may be processed to generate the ticket, deliver it to the user, validate it at event entry and resolve any support requests.

13. Cookies

The EventPark website may use cookies and similar technologies.

Some cookies may be necessary for the website’s basic functions. Other cookies may be used for performance measurement, analytics, remembering visitor preferences or marketing purposes.

The use of non-essential cookies is subject to the visitor’s choice or consent where required by applicable legislation.

Detailed information about cookie types, their purposes and how preferences can be managed is provided in the Cookie Policy.

14. Analytics Services

EventPark may use analytics services to understand how visitors interact with the website, measure performance and improve services.

In this context, usage information such as pages visited, session duration and device type may be processed.

Where analytics cookies require explicit consent, these technologies are not activated without obtaining the necessary permission.

15. Marketing Communications

Where the user has given the necessary permission, EventPark may send information about upcoming events, promotions, discounts or EventPark services by email, SMS or other supported communication channels.

Permission to receive marketing communications is not required to purchase tickets through EventPark.

Users may opt out of marketing communications at any time by using the unsubscribe method provided in the relevant message or by contacting EventPark.

Notifications directly related to the purchased service, such as ticket delivery, payment confirmation, purchase information, event cancellation, postponement or important event changes, are considered separately from marketing communications.

16. Your Rights Regarding Your Personal Data

Depending on applicable data protection legislation, you may have one or more of the following rights regarding your personal data:

• To learn whether your personal data is being processed;
• To request information about your personal data being processed;
• To request correction of inaccurate or incomplete personal data;
• To request deletion or destruction of personal data where the necessary conditions are met;
• To object to certain data processing activities;
• To withdraw your consent for processing based on explicit consent;
• To request restriction of processing where applicable;
• To exercise other data protection rights under applicable legislation.

The scope and exercise of these rights may vary depending on the country in which the user is located and the applicable legislation.

17. Submitting Requests to Exercise Your Rights

You may use the following contact channel to submit a request regarding your personal data:

Email: info@eventpark.com

Reasonable additional information to verify your identity may be requested to confirm that the request has been made by the person concerned.

EventPark endeavours to assess requests within the time limits prescribed by applicable legislation.

18. Children’s Privacy

EventPark may offer tickets for events that children can attend.

Where an event is subject to a specific age restriction, the relevant conditions may be stated on the event page.

Where processing children’s personal data requires permission from a parent or legal representative, the intention is to obtain the necessary permissions in accordance with applicable legislation.

19. Third-Party Links

The EventPark website may contain links to organisers’ websites, social media platforms, payment providers or other third-party services.

The personal data processing activities of third-party websites are outside EventPark’s control.

When you are directed to another website, we recommend reviewing the privacy policy of the relevant service.

20. Changes to the Privacy Policy

EventPark may update this Privacy Policy from time to time to reflect changes to services, technical developments or legal requirements.

The current version of the Policy is published on the EventPark website, and the “Last Updated” date is changed accordingly.

Where changes significantly affect how personal data is processed, additional information may be provided through appropriate methods where necessary.